sql_app: systemd unit file
Signed-off-by: HeshamTB <hishaminv@gmail.com>
This commit is contained in:
parent
b394bd9f2b
commit
40030c91a1
31
sql_app/tools/ibs.service
Normal file
31
sql_app/tools/ibs.service
Normal file
@ -0,0 +1,31 @@
|
||||
# This is templte to use for python venv applications
|
||||
# from https://broplanner.com/wp-content/webpc-passthru.php?src=https://broplanner.com/wp-content/uploads/2022/01/Screenshot-2022-01-25-224223-1536x237.png&nocache=1
|
||||
[Unit]
|
||||
After = network.target
|
||||
|
||||
[Service]
|
||||
User=ibs
|
||||
Group=ibs
|
||||
WorkingDirectory=/srv/ibs/ibs
|
||||
ExecStart=/srv/ibs/ibs/run-tls
|
||||
|
||||
Restart=on-failure
|
||||
RestartSec=15
|
||||
|
||||
# Security
|
||||
ReadWritePaths=/srv/ibs/ibs
|
||||
PrivateDevices=yes
|
||||
PrivateMounts=yes
|
||||
PrivateTmp=yes
|
||||
PrivateUsers=yes
|
||||
ProtectClock=yes
|
||||
ProtectControlGroups=yes
|
||||
ProtectHome=yes
|
||||
ProtectKernelLogs=yes
|
||||
ProtectKernelModules=yes
|
||||
ProtectKernelTunables=yes
|
||||
ProtectProc=yes
|
||||
ProtectHostname=yes
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
Loading…
Reference in New Issue
Block a user